AGS - AAM

Concept questions on what AGS is, gateway modes, authentication, MFA, session and protection policies, Backend SSO and monitoring. Search for a question, filter by level or jump to a category.

01FundamentalsWhat AGS is and how it relates to the Load Balancer, WAF and Bot/DDoS

• What is AGS - AAM and what does it do?AGS-01-001
• What is the difference between the Load Balancer and AGS; where does AGS work within the Load Balancer?AGS-01-002
• What is the difference between AGS, the WAF and Bot/DDoS protection?AGS-01-003
• Which vService types does AGS work with?AGS-01-004
• If I put AGS in front of my application, does the application need code changes?AGS-01-005
• What are the basic building blocks of AGS?AGS-01-006
• Where does authentication happen: in TR7, in the application or at the identity provider?AGS-01-007
• Is AGS an SSO solution; can it be used as an identity provider (IdP)?AGS-01-008
• What happens to traffic when AGS is enabled on a vService?AGS-01-009

02Gateway Modes and Access FlowStandalone Application, Portal, Portal Application and the Flowchart

• What is Gateway Mode; what is the difference between Standalone Application, Portal and Portal Application?AGS-02-001
• What is the Portal; how do users reach several applications with a single sign-in?AGS-02-002
• What do the Portal Access Mode options (Domain Tunnel, TR7 Application, Private Domain Tunnel) mean?AGS-02-003
• What is the Flowchart; which step types does an AGS flow consist of?AGS-02-004
• What is the difference between Decision Point and Switch in the Flowchart?AGS-02-005
• What do AGS Activation Condition and AGS Root Path determine?AGS-02-006

03Authentication and MFAAuthentication providers, servers, local databases and MFA

• What is an Authentication Provider; which provider types does AGS support?AGS-03-001
• What is the difference between an Authentication Provider and an authentication server?AGS-03-002
• What is Local Database; when does it make sense to keep users in TR7?AGS-03-003
• How is a choice made between the LDAP, RADIUS, SAML 2.0, OAuth2 and OpenID Connect providers?AGS-03-004
• What are the Web Form, HTTP and Portal providers for?AGS-03-005
• How does MFA work in AGS; which methods are available?AGS-03-006

04Sessions and Protection PoliciesAGS sessions, session protection, account lockout, bot protection and CAPTCHA

• How is an AGS session kept; what does the Sessions screen show?AGS-04-001
• What is a Session Protection Policy; what does it protect the session against?AGS-04-002
• What is an Account Lockout Policy; how does account lockout work?AGS-04-003
• What are bot protection policies and CAPTCHA in AGS for; how do they differ from Bot/DDoS protection?AGS-04-004
• How do AGS sessions and settings behave in a cluster?AGS-04-005

05Backend SSO, Pages and LanguagePassing identity to the application, login forms, templates and dictionaries

• What is Backend SSO; how does AGS pass the user's identity to the application?AGS-05-001
• What are the login form, page template and dictionary; what determines how AGS pages look?AGS-05-002
• How does multilingual support work on AGS pages?AGS-05-003

06Monitoring, Integration and EngineDashboard, audit logs, log forwarding, notifications, the AGS engine and other modules

• Which monitoring screens does AGS have; what does each one show?AGS-06-001
• What are AGS Audit Logs; which events are recorded?AGS-06-002
• What are log forwarding and notification profiles for in AGS?AGS-06-003
• What is the AGS engine; what does the Engine screen show?AGS-06-004
• How is AGS used together with Load Balancer conditions and the WAF?AGS-06-005
• What does the AGS Management tab show; how are a vService's AGS settings edited from it?AGS-06-006